Skip to main content

Vendor/product archive

lfprojects / mcp_java_sdk CVEs

Beta · best-effort

2 CVEs tagged to lfprojects / mcp_java_sdk0 Critical, 1 High, 1 Medium, 0 Low, 0 Unrated.

CVE-2026-35568

Published Apr 7, 2026

MCP Java SDK is the official Java SDK for Model Context Protocol servers and clients. Prior to 1.0.0, the java-sdk contains a DNS rebinding vulnerability. This vulnerability allow…

CVSS 7.6 · High
evidence mentions
2
Buzz score
16.0
Vendor/product tagsBeta · best-effort

CVE-2026-34237

Published Mar 31, 2026

MCP Java SDK is the official Java SDK for Model Context Protocol servers and clients. Prior to versions 0.83.0, 1.0.1, and 1.1.1, there is a hardcoded wildcard CORS vulnerability.…

CVSS 6.1 · Medium
evidence mentions
3
Buzz score
18.9
Vendor/product tagsBeta · best-effort
Showing 1-2 of 2 CVEsPage 1 of 1